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immn i ] m.WL(Dmmm^tmmms^ *> ©»« 
&«msi±. *ite»©3§ 2 ©iMfiffiffli* #-r s mmm 

iitii3»te»#IS 1 ©fM»*^bT«fflB«ltt«l*tiSfi 

at t -r s ffitmm * =r a © ® ?* . 

[0 0 0 1] 

[mj¥Lh©*Uffl#i?] **i»ttN *H*©RIiE*J:WSHS 

rts©iB^bts-r * e»*ws-^swf«as*if©««i 

[0 0 0 2] 

[«e*©tttS] fttjfe&aM^^Afc&^Tfct, *sam© 
i/^r-ACtt^ ?IgSrtg©&Sl;&t/^IET*-te;*i:^ 
■afcfrfcjPSJRfcfcafctfK £*ie>*IBlt-r3fc«>©-fe 

^©Ht^bS^i^iffi*©IE^tt©5tlf,<fefT *> .j&Stf* 

[0 0 0 3] dfflio^MifSilfi->^^A(Z)-bdf-a.U7- 
-f «©jSlft8tfc*-£ i:* s S* bV\, 

[0004] ( 1 ) mmmm<oiEm&(Dmm,ii zvmm 

«fc©lffl©^®*l©S«fc^&8if^fflW*©fc«> 
[0 0 0 5] ( 2 ) ttflW£©mi£tt<Z>ffiRHu SiteS 

[0006] -jKCBE-wyt^ffl&ftcea* ns« 

Sttl h©^»3&ff£ft£l>Jii^A s #V> 0 » 
i: «aiW»CDM©€ SMSttfteBlHlttT ft 4 fc K 



*©«*^to*a «fc 5 eiMES©^ 
s««ttB*4i>*:< , i"a<wi* t »a. -n^ (i) ©r 

[0 0 0 7] ( 2 ) fc£ s $gD¥ s *nf ©tfEfc£ usbe^ 
6©TfttWWS^©*ffi©*tf fcV^feHJHtfflfetSo 

SRia4i*©^-^^-^&»ite«t^ffe-e-?>«?* 
**»#i&ns^ ^©Jiiirtfcta^c^B^* 5 * 

* < &5 £ ^S%»©^-*^-;*©-«$£^o;fc 
tf>Cffl»*qsat<b"r s d hte n<DWmifi£. b So 
[0 0 0 8] v-f^D • ■fe;WEf3C&£E 

J:a«Jfi»©'.MHb • ^©'JW-Wbtf-jfjt^ £ 

«rt*&*4:uu 0«j*.hu mtrnvms. ■ &m\z &&&m 
»w«5«m«©»a^ *ttjjs©igs!fc^#w ?>n 

[0009] ( 3 ) mm<Dfrm& z> w±&mm<Dm.m. 
[ooio] »^*©iE^tt«s^twffl-rs*Kmm^ 

®fgit-br^^¥S-r5Clt*sf§So c© "&!?-r£ 

b" ii, R&jaa©;i»sfc#j&»-*-*ffl i ca »k (3) * 
atfcf dfcttjBsatfN:**. 3©«t-5*iii«iafi^ 
^A©-b^riU^^«t6ft*a"r*»&s Bgf^is^* 

^'Jffl-rSZlhAS-flSWT'ftSo W±©g*JSB©5*N 
(2) (3) !±&IBilie^a«©*JfflK:J:t)*»-e* 

So 

[0 0 1 1] HftftCtt^ ^J^.{iFiat-Shamir 
«l*©iEattftatB"e*4. Fiat-Shamir ?fe©i¥»i> 
Fiat, A. and Shmir,A. "How to Prove Yourself :Practi 
calSolutions to Identification and Signature Probl 
ems" ,Proc. of CRYPTO' 86, Lecture Notes on Computer 

Science 263,Springer-Verlag, pp. 186-194 tpl 
V>. 

[0 0 12] b*>b&#«b, Fiat-Shamir ffi<&«i^SS* 

fflKlE^:fflv^fc»^, Obi^osm) v&Dtam 

fcdh*M$tl5A^ ^©lfliE«Lai^7^t^iE4g* 
#®»K:I y 5 i^T^iEC T 9 -b ^ "T S UfgttA s ^5 . 
[0 0 13] «F*li©tt#ftff 

v\ j.m©a(tJiftw^nfci©^*ffluTs ^v-b- 

©fctf>tfffc^iifi* s ^Si:S:So Bt^H©tt#©fc«> 



* 
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t* c o#is & g-r a e a ii ft qrtett s . 

[0 0 14] C©lffljBjiaic*ru SHBffiSfcireit** 

fflasa^ufcflua^ftoAtttaiigdnT^* :T.ok 

amoto and K.Ohta, "How to Utilize the Randomness 
of Zero-Knowledge Proofs" , Proc. of CRYPTO' 90 o WL 

mm. * s/ i>ft v > t» © s ^-r „ 

[0 0 15] XBWD^tts !fl fci— !f 2tfffiS 

REWfl-fctfcSFiat-ShMrir ffiC <fc S*i*fltB*ffl V\ 

D H #3; ft J3 V 11 T ^ 5 . 
[0 0 16] &§IFiat-Shamir ?£©¥NifflfctU K.Ohta and 
T.Okamoto , " A Modification ofthe Fiat-Shamir Sc 
heme" Proc. of CRYPTO* 88 t> b < «i> L.C.Guillou an 
d J.J. Quisquater, "A Practical Zero-Knowledge Pro 
tocol Fitted to Security Microprocessors Both Tran 
amission and Memory " ,Proc. of EUROCRYPr 88. fcp 
bV>. 

[0 0 17] D HSt&*m©fMfciU W.Diffie a 

nd M.Hellman, "New Directions in Cryptography" , 
IEEE Trans. IT-22, No. 6, pp. 644-654. £i¥bV>o 

[0 0 18] ■V-VZ&l&m&mm.V, q££fi£U N 
= p • qft&H©ffi©fi^-rSo Sfc, (P-1) *«fc 
.V (q-1) fcS^fcJlre*«S9Refc&H©J£fflfts 

[0 0 19] 

Sie=l/limodN (i = l, 2, •••) 

I3U i ifct^--yi©l{SlJ#^§■ 
4!UI i l i JlIi;^:&©aI 5 tj & s o 

[0 0 2 0] (1) i— tf 1 fc^.— tf 2ttSV^tiSgiJS 

[0 0 2 1] ( 2 ) JL-tf 1 fcfcSU&r 1 ( 1< r 1< 
N) fe£j*U ^CiDXl&m CinftJ-— tf2 

[ 0 0 2 2 ] X 1 = ge • rl mo d N 

(3) a.— tf 2l±SU8tr 2 ( 1 < r 2 <N) S£j«U 
«St«t !5X 2 X2 = ge -r2 mo d 

N 

tfblZs SLISSJE 1 (KEKe) S£j«U ElfcX 
[0 0 2 3] (4) !f lttftStCJ:*), SEE««Y 

i stw-r*. 

[0024] Yl=SlEl- g rl mo d N 

SLI&E2 (KE2<e) ft^J«U E2hY 
1 fc;x-+f 2£j£3„ 

[0 0 2 5] (5) i— y2li&5$©t&tt£fir?o 
[0026]'Xl=?Yie -II Elmod N 



[0 0 2 7] g|Kft»J^C«t>3H-SC-r5. 
[0 0 2 8] K = X ir2 mo d N = ge • rl • r2 mo d N 

[0029] Y2 = S2E2. g r2 mo d N 
(6) i— y lttJRaffltjOEftff-5. 
[0030]X2 = ?Y2e • I 2E2 mo d N 

tjaEaa*fifcft-ra»&fcHu ^—y 2*1^*4^*1 

[0 0 3 1] K = X2rlmod N = ge • rl • r2 mo d N 

±sa*jBt:±iitfx mmm*ffii\ -toiE^tttw 

Sftfc»^fc:©#«#tffcfr5£i:#"TfS4. Itft«© 
fcif>fctffcfc»re*ie*fc-*-*£i:ttft^. bfrbft* 5 
6x £©35fSGHU ^«WE#»©afi*II!lOl^J«fts ¥ 
^tfro fcttfcRateftfc*©'?* »K fflS©RE*fr 

•3TV>So ^©«iSaC*t*»B©MT-l±. 

ft^»H##V<>. ±I3¥MT*(± (XI, El, Y 

1 , X 2 , E 2 , Y 2 ) ©«©**<&»-£* D x fifctSN 
©■y-f X&512 tr^btU e©iMX&64lfy r£f 
4 fc£$M»tt2176 tf y p fcft !> > HMMI***>-*>^. 
ft*, £©»«*£«, M8U*9I K I 2©a«lt* 

A,T*iNftv^ m§!i*-5©»@ Bienraiwiacjasa* 

[0 0 3 2] 

Cs tife*tt^t«tS4ffi*©IE^tt5g|gft»lif^l«^^^ 
At®fflbfe«-&> IE^ft««*m?JE2ftfc&-t\ 

^iE«i*i»«*©ia*ci!i *>3M,"C7**zti mm& 
ft 2*HiTffl*BSB8iE • m&%*mmt it^stft, 

[0 0 3 3] ##£BJi©glftl£, BBE«d"Ctt*eBWII*© 

ttT'&^T, fi6*J:5tia««©ii>ftV^aft»«r 

^> CI il ^3 o 
[0 0 3 4] 

mmmz&m • sgft-ra* v b u-^m^wt br©« 
»©isjft»*«twwjflusA»e)«riE**u *»t««i*tt« 
aia#©m 1 ©asafflMiik^yA^iMMBftwu 
mm&mmt£, mm<ofn 2 ©^mtsiBft*-r 5 « 
jMs/^A-efcoT, mnaatts* 5 ^ 1 ©sl»*4j« 

bTftnEJlWSUIIlsfetSHB-rsxgks mJlB&)i&4B85fc#2S 
2©S1*S^*U iWll«©&IBfll«ftfflV^T«l!l-rs 



(4) ft IW05-3476 17 



mrnxkmrntrnmrn 1 ©grams* &bbeww&£/&u 

* 7 1 A ©aftTjiST' & s o 
[0 0 3 5] 

MUB] **i!llfck £tt«fc£3fll6|g^©BliE2:ftft 

fcttK©¥«rcfT-5. *i\ &m#&i<BaM*£j& 

stoft-j-s. set, mmmmtmi^mtmrnkm 
u mmmmmt%mmmzmmizmm?z><, &mm 

tt, SB 1 ©^fcfllEaM«£BKffi»m£©Hffia 

fcttfc-r £ ^ £5£Igf 3 ;fcll<t -a T«l4$*©BiiE£ 
*r?o BtE&lc. »t^ttBIEI$©flffi£rm££fllffi 

©«5&tit$fi* 1 £>B^§£t£f#?>o Hi 

[0 0 3 6] a%»C«tS^«*Oi?,SE^II 

jfijsjttt* ^n^a-u s«Bffi*©«8'j#^fc<fce>#tffli 

tta««H#«D«M»«fa*«(TbT*<. *«i«£«fc3 

fffttSURfc^fiW*. MKMM€idU £©2fWS©g(Jfc 

fcfc, *IIIB2a«©SL^i:BliEtf$aA s Bf^©li^iC*«fc 
f d i: SflBK-J- * c t T-fr 5 . £ iitf ttB$ *ifci§£- 
C BimC3» L&*«i:ffi¥«8y*^C J: 5 itfSSg 

[0 0 3 7] ^**^Sit!^©fBS^JEfc8l« 

*ftH^-rscifct»-e*4. z.©«£\ tm&SH&as 
ut*5<o 3&£«4©sc£^©£Lft£j&Hft*tt 

iS. ttliW3le££^#ffl5£IE£tt£ttB-f S¥J6 



ffll-r*. ffi5BKl$£^feajfttts SulBHtt^tS^i: 
[0 0 3 8] 

[SWJ] WTx HiBfc#JfflbT#»W©^«*Ri!8 
[0 0 3 9] *-*\ ««8afiS/^7 l A©l!jEa*BI2C^ 

•To zti?tim%<Dmm^ (psi ) # 

3£.£s#©iBtttim (sp S i ) *««ff*n 
s. *i»h7->«tt, $y#p«ccyg&©»tt»cs 
i , -cs, A>s>fc*. ^att«t{±±ta©attfe«*BS 

WR#*Wt**i4. fW»«CCfcBu «-4©*KMHil£fc: 

«csi t^*g*psi ra©aftii, nmtfimmati 

ilfis SJ&MCSi £$JfllJ3CC©N©a4IttN «|R«> 
b<tt«e»Tf*«. ^jSS4S*PSi ©JESttOflKHsJ: 
y t ^ll]>^T*fflV^SBt-^^5»;ffl©Bt^ii©ft#tt^ mm 
Sffi^PSi ^S*BCSi ©BB-Pfrtotu **©fM»8 

HfT^ns©(^ «$i4Si*psi -frhtDmnm, so©* 
fa^*psk ^©swBRfftij-eas. 

[0 0 4 0] EI 1 £&MHW5fe©|gff • Sltt 

[0 0 4 1] ( 1 ) MeiStti^ ?>»tt«-N, *KtttHI£© 

[0 0 4 2] ••• Ut'J 7*101 ) 

( 2 ) *Jfe«l±, « 1 ©iSLISR 1 ££j£U HftilS4g*t 

[0 0 4 3] — C^y^lOZ ) 

(3) »2©fSURR2ft^J«U RlkR 
2 2:IB«1lHRSpsi J: fcBBHlWWfrfc^JB 1 0 3 Jc «t 5 
^fi£b> ^.BEtflBcrps^ffSo 

[0 0 4 4] - (*7^:/103 ) 
BBEflNRopskJS 2 ©SJ&R 2 4»%«^ji®-rs. - 

(^7 L >V7'104 ) 

(4) mm&, ISl©SLi!cRli:H2©SL^R2i:^ 
^*©aSS'J#^PSi £BSEfim<n>S*B8iEtim**£¥ 
S10 5C1U <g**»OK©»^Ctt % ^$giS*4PS 
i T-feSt)©tBliE^-So eStfNGffll^Ctt, 

«*-e$)StbT, Ma^siT-rso 

— Urfn05 ) 

(5) ±BBBEjDffltdWbUfc»^, 

14. «a©Bi^S14SI^*^S 106a, 1 0 6 b t J; 

Z(D£g, WfeCfll«©2flE»*fi 1 fc>-r, ± 

KBiBira^xsiufcffifSijjiWijBEartK^iMSWi* 



* 



(5) 



— (T.J-v 7*106 ) 

±i2¥«©5*>s (2) a>e> (4) oomm£.<DiEM& 
fflm&tt* iDflHRca"j<*a^wsis*4V'>tt, i 

•5 d hCfU^i: bti^CD^ fcO»*tf &na« 

ot, ^@«Lh©fll«©^^=*»tlli»ffl*t:BIE 

#ffl^-&SSLI»A s lfim«^©«a*l56 <-» 

[0045] ©sv>©3S«<«siasiJS*^ffl**effl 

*a«lalMLhTJ»*, ^ft£ffi£bfci:bT^ RSEA 

[0 0 4 6] ®CDTJ««bfci-5tN BBEWrCfflfMHM 
©■BUS^CSSWtf&K coffifftfck RffiEXL 

*@#©&IBt»$K^©IESttiEBJ!tSfR (KohnfelderC 
<fc£Public Key Certificate*^) ©jlffi^ST*;!?) 

ik *©a»«***ifj«rt-a. 

[0 0 4 7] I Dffi*C»3 < ffl^flBSifefe J:W5V 
^^f^ftffllWJtlt &©#:£**;&?><> 
[0 0 4 8] • Fiat-Shamir ?£ : A Fiat and A. Shamir, 
"How to Prove Yourself " ,Proc. of CRYPTO' 86 . 

• i£3MFiat-Shamir : K.Ohta and T.Okamoto , " AH 
odification of the Fiat-Shamir Scheme " , Proc. of 

CRYPTO' 88. 

L.C.Guillou and J.J. Quisquater, "A Prac 
tical Zero-Knowledge Protocol Fitted to Security M 
icroprocessors Both Transmission and Memory" ,Pro 
c. of EUR0CRYPr88. 

• IfeSSFiat-Shamir m 2 : *fflSl^ "R S AV§^*m 

ffli/fciDc*^<ggBE*sfc*©jt5ffl" , mm* 
mmm£*<Djfcm*/>-tfi>v^mm, pp.567-572. 

■ Beth*£ : T.Beth, "Efficient Zero-Knowledge Ident 
ification Scheme for Smart Cards" , Proc. of EUROC 
RYPT 88. 

±E©*TJa««* J ^tt < v *8ttJB*^? AOiBBEt: 
miSfi^t ITv i£?IFiat-Shamir & 1 £ 2 AW h 

R 2 = g r mod N 
X = R2e mod N 
E = h (X, R 1) 
crpS=Spsi E . R2mod N 
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ftS„ tlftffljatWttt, SSSIFiat-Shamir &1CJ:4 
[0 0 4 9] EI 1 ©¥JR ( 5 ) ©aft^jBSTtt, 

3&ae*i6«j: u&v^fc«>, ±#©afi*i±s (2) * 

6 (4) ©RffiawW>»fB*£*S" IA*<. BBEflt^©9ffi 

si** a*©ffl«s©a«*fcBifff»4©T?, ±i* 

©iifiSA^&l - *., 

[0 0 5 0] 0 3£fcfc, E?J£f«£i£5gFiat-Shamir & 

[0051] t*--tr^ai«;#ttx©*fltftff3ia 
fc-rs. (p-i) (q-i) ©*/j^fe»* 

GF(p) , GF(q) TftCB*e«i:«tSfflRg*S«)6. * 

fe> «JfcJS©$5&tf$gt ( 1 < t < L) fc^afc. SJteJS 
G= get mo( j n 

ttisspsi waifcafT-rs. 

[0 0 5 2] Spsi e =PSi mod N 

fiU PSi ttumtebffsi ©«BU»^ 

^f?>{:, -^rpjtt©E*ssiiSh 0 ^fes„ ma* 

7"n y^Bf^-D E S(Data Encryption Standard)©CB 
[0 0 5 3] JiLtT-£^bfctf$8£&©<fc-5fc:<g3I-r 

So 

*) : N, g, G, e, h () 

WBrnnmHiffl. (±a6*Bc«fT-re) : t 

®*mH£©«8flttll (Mi^4S*PSi t^ff^S) : S 
PSi 

aw- tr^sitt#©«afm«: p, q, l 

JBffl©^«tt«© J; 3 1 * * o 
[0 0 5 4] ( 1 ) MWt&itt* £ttJ3£ i£Ea©MS!l 

WSi SiI«t-5o 
[0 0 5 5] - 7*301 ) 

(2) SJtWSH:, 81©iURRl ( 1 <R 1 <N) 44 
J*U Rl£«i4lfefeKS£{rr3o 

— CXr-y 7*302 ) 

(3) mmttt* SL&r ( 1 < r <N) *£/*U * 

[0 0 5 6] 



- Urf 7*303 ) 

(7^^7*304 ) 
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(4) Hfli, &-*©tt*fcfT"5. 

[0 0 5 7] X ' = aps e / PSi E mod N 

fmw&fr mm $ titz e t &5$©;&s#-ifc-r a 

E = ?h (X' , Rl) 

(5) SfibJEBttx (4) £:fc^T^«5fc©IES+££fil 

Bi/fc»&, *©tmct«ti)i«*iiKft*»«. 

K = X ' t mod N=ge • r 

K = G r mod N = ge • r • 
±ia^SC©HftW^T>^ JtttftHKISUB (G = (ge ) 
t mod Nffl«a»e>t<Dtt**»iClk. t» U < tt N X = 
(ge ) r mod Nfflft>6rOttt*J65CJ:) ^HUT* 
fc£PS!)v S8=#B:l«'^©ttfc#&&n&^. 

[0 0 6 1] ±lB*^©afI*«±, i£N©-y--< X&512 
bTvK -^|pIttHt!fh©(±J^S64tf>y K ftRR 1 £ 
64try hfcffi^-rai:, 640 e»hT?»4. 

[0 0 6 2] BS4Ctt, l?.iiE*l«*ll£3IFiat-Shamir & 

"To 

[0063] ( i ) imw*z&s smmiz ssmomi 

#^PSi ftjas«U »tf!«{±> »a*S*t:S^S©^'J 
S^CSj *»flrra. - (7^ y 7*401 ) 

(2) SflbHtt. iURRl ( 1 <R 1 <N) *£/fcU 

E = ? h (X ' , R 1) 

(5) attStt, (4) {C*5V>T^«*OIE^'ffi^5S 

^•PSi fc&RR 1 tX ' ftA*l/TKtOK4*l&8. 

— (7^y7*40 

6 ) 

-2k »fS4g*tt> g^«rt©wigtf p S i (caauftDtt 

S'JS^CSj fcajfcRlfcXSA*UTft#*KftjR«> 
So — (T^y 7*407 ) 

&*, SURRlfcX (fci^fctX') fe*Jffl-r4<fttJ 5 
fc E & A^J-T 5 iotbtfe 
[ 0 0 6 7 ] ±BB*SC©»©*ttv. H3 K^-riQfifflk 
HHR640 Ks» h*C&4. 

[0068] 04 izm-rmmmiz^T ( 4 ) ©«a# 

«-e«ffl-r*H*fpsi (501) kfcsj (502) ©-#J£ 
B5Cwt. H5t:*»*n»f (503) tt»SSTf»t). 

#A^©M^T-$>5o «t»fc©«g^PSi(504)hS 

*»©»g'j#*cs.j(505x * 6 iz%mmm-cmRi£titz 

a»fll*(606) ^A^-raWC'&So £ft&©iLR« 

t^ns. *K^£fli©Hftfpsi tts @2se©ftS'J# 

^PSi ©ajRf^OA^XHtSftV^dtasiM!* 
£ftT03o -f&fr*>> PSi ©A^3(504) ©35#£, {ft 

©«as«i*©»ai»^psj fcAa-ra^fcjPTS&^j: 



[0 0 5 8] 

- (7^^7*305 ) 

[0 0 5 9] 

• t mod N — (^r-y 7*306 ) 

[0 0 6 0] 
t mod N — (^T-f 7*307 ) 

[0 0 6 4] — (7^^7*402 ) 

(3) tmm^tt^ sum 2 u<r2<n) 

U W&(DmW&nfi?%o X = R2e mod N 

E = h (X, Rl) 
crps=Spsi & 'R2mod N 
{.7.7- v 7*403 ) 
BffiflHR<rps*J:WE*aj|liBCS6fi-r«. 
(7^^ 7*404 ) 

(4) *j&«i±, ifcSffltWftfT'S. 
[0 0 6 5] X ' = crps e / PSi E mod N 

[0 0 6 6] 

— (7s^y 7*405 ) 

*i*psi i:s%«csj ©racsi^ww-rs^iitf^pife 

[0 0 6 9] £©«t3^^afcJ:&**Ht©#*ffl 

»*iEBbfcJB, ^©ise«j$£$e>ft5£S$ft*© 

©5SE±ttfcfck IWLfc^. 
[0 0 7 0] ifctc, SW£ttlSW£:W15fc:RBE&ff 
^&#*>, *^Sfr3#a©IQfi«fcBMl-r3. 3© 

*n*na*©iBf»ffif«scsj 
[oo7i] 06 izmmm^t&mmmmmM • 

[0 0 7 2] ( 1 ) «^«Jfc*^Sttl«'v »$«»£© 

[0 0 7 3] - (7^^7*601 ) 

(2) &t&m±s jSl©SLRR 1 ££/?KU SSi^4S*t 

[0 0 7 4] — (7>x^7*602 ) 

(3) tmmMOis SS2©a»R2ft£fiRU RlfcR 
2 hlMKttlR Spsi ftBEflfflMfofc^Sfc J; 5 ^fiE 

[0 0 7 5] - (7x7^7*603 ) 
d©iS!EtSfgo-p S ^2©SU&R 2 ftaJftBCSSffll-r 
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[0 0 7 6] - (75^7*604 ) 

(4) submit* r i tR 2 tMim&<Dm&m*&*i 

©t§^£fcfc, 88ifc|4|fcfc£PSi T-feSt)Ot^,IiE-rSo £ 

— {XJ-V 7*605 ) 

— (7x7^7*606 ) 
(7^^7*607 ) 

( 5 ) timm&tt* RitR2 t&mm<Dmm*5csj 

••• (75^7*608 ) 

(6) ±8BBHlEJBaitrijajUfe»&s «$SJ*fc««!» 
••• (7^y 7*609 ) 

a«jT\ asfe*a*«i:«t«a4ffi*o^n^nA s ^bs ti 

■5B«Jt*fbTs *«»«*©Bffi©#*fTS»^fcRltt 

.R l. = g rl mod.N 
X 1 =R ie mod N 

x i zmntttttmm-rzc, 

(7x^^7703 ) 

(3) flffiM&lt* SU&r2 ( 1 < r 2 <N) 

R 2 = gr2 mo d N 
X2=R 2e mod N 

Ur» 7*705 ) 

(4) SflUSttx m®.hlZX2*Xt)??>Z£\Z£t), 
E 

Y CS= s CSj E1 • R lmod N 

(7,^^7707 ) 

(5) mm&&* sfltBcsj ©iEStt**a©tni[ • 



[0 0 7 7] H7Ctt» &3gFiat-Shamir i£C«fc5ffl^ 

mwiz «t zmnmut d hjsc «t 6®«w?££i!!£bfc 
[0 0 7 8] -y— tr^sitt#tt**0ipfiaftff-5«fc 

S^feSo 2o©jR»p, qfcfcik ^©«£N 

ttS, (p-1) £ (q-1) ©«/Jx&ffiflRft 

LfcU LfcSVMCjR^*SfflRe**«e>*S. S££x 
GF(p) , GF(q) TKCJR>e«i:a:*5«Rgifc*»4. « 

i^«*psi fcWbttts «stiifc-r««««spsifc 

[0 0 7 9] Sp S i e =psi mod N 

fiu psi a.mmm&&i wmm^ 

[0 0 8 0] S C Sj e =CSj mod N 

fibs csj {±aflbscsj ©Mtsy** 

-#|Rl£fc©ffi3&H2&h () ft^ftS. flilix 
7*D V78IH8-DE S(Data Encryption Standard)©CB 
C^E-HTfllfiKbfcHMcfth 0 ill- -So 
[0 0 8 1] feU:*e^bfcfll«fc«©J:$C*Sf 

[0082] <&sX7-j*<D&wHfm (±mum*t±& 

«l»KIEff-r4) : N, g, e, h() 

©a%^©ia^«$g (SttMcsj fcafj-ra) : scsj 

(g»4|g>fc©^tif*g (^**PSi C«frtS) : S 
PSi 

**«#*©«««* : P, q, L 
«*?*«■*©» t>. 

[0 0 8 3] ( 1 ) SiSiSg*^ 5,SSfe^lsSiJS^PSi 

j A^fi^tiSo — (^vttoi ) 

(2) *ttUBtt*. SURr 1 ( 1 < r 1 <N) *£fiRU 
*SC©fW*ff'5. 
[0 0 8 4] 



— (7v?^7702 ) 
U ^©tfflt^trdo 
[0 0 8 5] 



— (7x7^7*704 ) 
[0 0 8 6] E 1 =h (X2) 

£©E 1 fclg^ffifgScsj . R 1 fc5b»&8m©tt*ftff 

■5o 

[0 0 8 7] 

— (7^^7706 ) 

[0 0 8 8] 

E l=h (X2) 
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Y CSe =? CSj E1 • X 1 mod N 

wtst-r i* 

[0 0 8 9] - (7x7^7708 ) 

E2 = h (Y 1) 
Yps=Spsi E2 • R2mod N 

^MigYp S ss«6«t mm? s . 

(7x7^7710 ) 

K = X ir2 mo d N 
= g e • rl • r2 mo d N 

(6) »flb»fcfc, »&4gi*PSi ®IEatt*«iCOtH|C • 

[0 0 9 2] 
E 2 = h (Yl) 
Y cs e =? psiE2 . X2mod N 

K = X2rlmod N 
= g e • rl • r2 mo d N 

±XBfi&<Ds 7 5ry 7702, 706, 708 fck *JtJS©IES'f4 

SiSSBFiat-Shmir ©*B^86i88c 
T'g 5o £©<*> T-X 2 fcfflMB£*Jffl-rstftffi#©a 
jRflHRfc*«eUTV»4. 77^7704,709,712 
fck *«8«l*©iEattK:B-r4lfi3ffiat-Shamir ©*B¥ 
flMRati:**!-*-^*:^**. d©4"T% Y C s£l&SE# 
SURflWRfc^fcLTO*. Y C s©fittts 77^7707 © 
B§^$T*«aiS*t:ii^?aiJAST*^^v^©T\ c-3 bfcffl 

©iE^tt*iiEB^-rs^«T*$) ?>* s s iat«aa***»ftt 

[0 0 9 5] ±K**tts f£3tM*fi5©«EIB&L&HI# 

#5£©4$8cfcfc, 8ttE#©aREl N E2fc-*ft-t*lX 
2, Yl (Btj|B^«T*«±Y C s) *>e>£frf3±5fcbT 
V>-5j£iT?fc&o u©itCi>), El, E2©fij£A^ 

R 1 = g rl mod N 
X 1 =R ie mod N 

- x l &jmM£.K.mm-*&. 
&7-v7m ) 

(3) mmffittts SL»r2 ( 1 < r 2 <N) 

R 2 = g r 2mod N 
X2=R2e mod N 
E 2 = h (XI, X2) 
Yps=Spsi 62 • R 2 mod N 

Yps^ e 2 ^&mm^mmt %><> 

{Ztv 7*805 ) 

(4) WtsMtts *©^J(ifcJ:t>toKWil*©REftff 
o. 

[0 10 2] 

X2 ' =Y PS e / PSiE2mod N 
E2 = ?h (XI, X2') 

E 1 = h (Y PS ) 



5, 

[0 0 9 0] 



— (7x^7709 ) 

[0 0 9 1] 

— (77^7711 ) 

[0 0 9 3] - (77^7712 ) 
[0 0 9 4] 

- (77^7713 ) 
g^ftoTl^o El, E2*fea»t»©fl : *iX*iVNfflf 
$gT*feSdil*^, «6SiiM'>^7 1 A©iSiE -Bltt^T- 
fcfc, ttlBBI 7 ©3MI©2f #»« S:©'>&v^;e 

[0 0 9 6] ±E#S©jl««tfc. &N©1M7:£512 
try h fcflBWSfcx 2048bT«y 
[0 0 9 7] E8^{i, i£5IFiat-Shamir StiSf-f 
A»& i:ffl^8BBft- i en*ii©l8K*SCC*Jffl U 

[0 0 9 8] im^m&VKDM K> o 

[0099] ( i ) mm&*%&im~mffl**&zi 

j ifimmZtlZo - (7t^v 7*801 ) 

(2) ftRr 1 ( 1 < r 1 <N) fc£j*U 

8rJC©tWSfT"5. 
[0 10 0] 

- (^t 1 ^ 7"802 ) 

U ^©^CJ:DRlE«#Ypsfe#tf>a. 
[0 10 1] 



— (7x7^ 7*804 ) 
[0 1 0 3] - (77^7*806 ) 

wca^ aasc «fc 5 sskahb Y C s*ti-*-r 

5. 

[0 10 4] 
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Ycs=S cSj E1 • R 1 mod N 

mummy csitmmMMizmm-rzo 

&r-i>7m ) 

K = X 2rlmod N = ge • rl 

(5) tmm&tts mmmcsj ©iE^ttft^affltw • 

[0 10 6] 
E 1 =h (Y PS ) 
Y cs e = ? CSjBl • X 1 mod N 

K = X ir2 mo d N = ge • rl 

t"SI£3IFiat-Shajnirg:S2;&r>T^3o — S\ 

7*802 OX 1 ^^^^^807 ©Y C s&> ££3gFiat-Shami 

r ©*I^|g&fc&oT^£h^&1-Z:tA s T*t3o C 

[0 10 9] ±|B*a©a««ttN &N©+M;*£512 
KvK — ^|firt±BBRh©ffi^i|[*64t:y hfcfEJgf S 
1600 bTy hT-a&So 

[oiio] »«a«*Ps*K mmmccizx^ 
x n^<D&mmtmum^<D i d ich uT^^nfe^^ 

[0 111] HQfcfcWtx ffflWSCCTN ftli||SS*P 
S iC&ilKe i£0"P S i®ID#f ID iC*TL 
Ts ftWJSJCCOSHSIIKdccCJi^TWfiftffd. 

?^©i^*s i&*e»*»ii»JBKfe«i5i5PSitfif&« 

[0112] «$ii*P S i BIEH*&3ic % @ £© 

i i d i k±E©»*©*s*s i &mmc s 
icsars. 3i>t>frbisbmfflmcc<D2immKe c c 

*K»L/TV<saSJft»C Sili N S£©*g& N S 1 
MUK e c c T?tft3iE&?TV\ mASrnfce*©^ I 
D»^--K:»fe.affl»3&»*ltta*H*P S i © I I D i 

tl^-frgfrfcitslfc-rSo £©ttttfcJ:!K ft©1£S© 

w*>g*©d*a»)©&KW©aj»ft««swii*p si© 

[0 113] fttx afi*JBCSil±*S^yfe— S?M* 

««®4ffi*p s i cs&a-ra. §fSbfc«4S*p s i 

IL&fiftCSbT, JRtt*«*PS i©«S«MIKdi* 

ffl^TS££fr-5o g£i|£j|IS2£gflpgCSi'N3£ffi 
-T5o CSilt »*|fi*S2*ft©lftfiTftt**tlfc 

-®^\y^iB»TfJEEI6MrabfclS*J:ltl!l[U BSEfc 
[0 114] iCC, Wft©fe«)A.y>i|iti5 



*e>c, ©^KSi^©twK:«fc»>#«>a. 

[0 10 5] 
r2 mo d N - (^^y 7*809 ) 

^©HftSjW^Lfctt^fcttx a*B*iESTftSfc 

[0107]- (T^y^lO ) 
S&Cn «9IIK*J»GS©tmtKJ;D**&*. 
[0 10 8] 
r2mod N - (T^y 1/811 ) 

8fcre©Ett^*4W**£fc*»#*.&n4. *fe> 

^^©^ffl^tn-rsil'.tiEtiibTfes ^-v^-;u 
I D©Ao& I c* - K**R«illl*K:lfA*i:©f^ffl* 
-ri£i:C.fc»>s H«©a&SS»*£i:a s ''eSS. «TF 
©HSfif!lT' 6 b d i: #H *. 4 o 

[0115] *%ffittKa*u& mmmccmK^mm 



[0 1 16] — j!n v^f^Dt;i/^fliiiiCSI± 

'Mjc&d, aa«»3f*)!if£*©wi'©a±a:^*»e>N » 
«©a©fiv^ffi««: if-«a©aff a© i 

©*§£-«:, &ii©®ft#£6£i£* 

&M2fttz£LTb, «fflW^ftfflV^fcBllE©fc»fcffl 
V^4iBflf«*ROM3&ir*>6»«5»tH*n&»^KJt^ 

[0 117] MEW^fcfflV^&BttfcSfflUfcll 

^ iMt*t)-3T«©SMi»csii«fiRu afinttflti 

^&^©*Bafif«*!ftV^±fefTL.*-5(f»«il l lFb"C b 

m izmtnts z © <t a *ff »*ff -r Hrt6tti±* < fe « . 
sfeCs ao»©it-br^sMt#ffliBT, ffls^\>H* 

E^^St-T-Snl^ttASfeS. d©4:*t), fli!lflVSfl(c 
[0 1 18] iD^Ts ^Sg*PStiS**^CS© 

[ o 1 1 9 ] m i o c^-riafiwtts ^*ipi©^©^s 

l^i^:}:^ BBEli:S-rsRFlHI©fi«*iar3&* 
©T'feSo 
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[0 12 0] m^<Dm^(D^mS l hID#^IDi© 

So 

[0 12 1] &fc N «ai&*PS iJi&S^y-fe-^M 

do W**SjRS2fc^ vfe-^M*«*BCSi'v2ia 
t5. SifeHC S i it, g«i^*S 2 SflgOtterctti* 
£ftfc«§tSS*P S i (D^MSIK e i £ffl^Tl&fi-r 
So £©&3BSX« *y-fe-S>MC»UTa«iWil*PS 
i i: H-©> n * a. RMft?£Bimi b fcf&jg £ tttt U 

So 

[0 12 2] CilTs #Wb<D&«>MV>>iBI»ICJ:* 

[0123] fcKOBfclTtt* «««3jRS 2 fc* v-fe-S? 
Mfc©»aft*RbTfrV\ »SIS*S2©flyii:.>» v 

[0 12 4] fc«L#*fc0rCfck M^Ir]©*©^** 

[0125] hi nz^tmmmr^ BKfcfi-*-** 

©A— * Mi^illU {I^©m-* H-ovvrglfrffigl 

[0126] 01 2, eh 3tr, 2«»an- 

[0127] 012 JZ^-t^-X Hi, JSSte^ffl^ > 
W (16lfybK ffifflUfyM (19 6tfyH hi 

i 2 (b) izijk-t&oiZs ^*;msyc i (4 try 
M s esmmmmr+iJi'SA d 6try h) , 

hv^^t^TCH (160H^h) , CRC (16 

[0128] EH 1 3 tC^-T^-^ h fct, »«JtEi»fl|5 > 
y^-f AR (4tTyh) , ^^-h^>xtf;i/SS (2tT 
»H * flffiBW^CAC (6 2tfyh) , 

w (3 2 try to , ftwae^cAc ( 1 2 4 to t 

1 6tfy h©#-Ktfy h#e>&6o 6 2 tfy b©f&OT 

fg^CACIi, 013 (b) t^ri— yw*ity»^t 

^MSCCHffe!), 1 2 4 tfy h©$JWt^CAC 

i±, *-**;u»8ijc 1 (4 to , 28ftSJ3'J?f^ (4 2 
tf y 10 , mvam* (2 8t-^), i— im^ww 

f^^MSCCH (3 4 tTy (0 , CRC (1 6Ey 



tO friafcSo 01 2:fc<fctF01 3£^-TM-;* h© 
O^Ofnffl7i-7>v ht> 1 6 try b©CRC©$tH 

[0 1 2 9] 0 1 2\ZTT<fVic— hftt, 
hfc&DflHiK* M©1 9 6 tfy h#CRC*fottfy 

ha:CRCftjinte>n«try hfejoAfefle-?**. 01 

CACCD6 2+ 1 2 4= 1 8 6 tfy htfCRCj&tttfy 
hfcCRC£8B* £>n3£y hftiD*.&fflrcifc*. 
[0 13 0] 01 2\,z^?y*- 7^ t*T- 

k^^ft^TCH© 16 + 160=176tryb# 

v y b- Ttts 1 ^— * h fefe t) i— tffiBMW^* 
*;i/USCCHCD6 2 + 3 4 = 9 6 h tfRffffltit 

[0131] coin-* Ymmzfe-DtzCRcum*)* 

1 %t U -tii:|5lb@JK©ffil*©^(iffF^-r.5 

*)©t-rso 

[0 13 2] CRC 1 6b i t SfflV^fei:** 
DjbSfeSCtjftSSrt-flMsO:, 2 "16, *5*5J:^1.5 xlO 
-5T**^^.e>n5o ^n«i±f3© 1 %<t t)+^-/J^^V»<D 
T\ CRCtttiS^tKtJ^BT-tSiifg^-r?). 

[0 13 3] c:©h^> eaiBfflTJSKv b^!3*^£ 
J:tl>^ CRCtJaEtTv bfcCRC**»tj-feix«lfy 

??tts t>= (l-£) n h^So 

[0134] zz\x\ fiaas»©t;y h^D*©a«fitio 

1 2©.7*-V»; ^^ffl^^fe^l-g■T*^i^ 0. 13 9,0 
13ffl7t-V5/Mit 0. 15 4i;££3o 
[0 13 5] BBE*Si:bT» RSA, ^i/^fv 
;i/©W*itS^ffiht-5i:^ »*ftbtaSt)«-rKvh 
IStt, 512 v 102 4, 204 8© 331 9 £*l 
So dtt*:lt©tf y h»ftMi£©7*— W ^^fflV^•r 

dfflbTassW&CjfcSa:-^-^ h©IS![<&Ki:i-?.h, 
01 207*-Tyh75 1 2lfv h^SfS^{±K = 
3T*fctK 01 3©7*— V>y bT-2 0 4 8 try hj^S: 
■rSUJi, K=2 

[0 13 6] BttC»-^UTJ:v^M*t»4:-J- 

5^ 012, 01 3©7^-Vy h fct, 1/^-^ b& 
«■*-*©£ 5 5 'J«>ftS-r5*»6, t^BBCSSfflT?** 
h©^{±N{i s N=t/ (5 X10-3) =200tT& 

S o 

[0 13 7] ZZT\ ±83© h»*ft©BBEffl«« 
h7?©n<r* h®51EST-> N^^-v b ^Slibfc 
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P = (I-77) N + N C 1 

+ N C K- 1 X77K 



Z<DPZmW?2>£, mi 2©7*— W 1 2 bT 

fHS5M-3»^ N=3 0T-P(i^6. 9%, N=6 
OTrPfctiSftO. 7%h&£o Ufc#-DT9 9. 3%fflfit 
#T-g?JiEffltSfft©&ft£S5T-f -5 fctttt 0 . 3IMM&* 

5o hi 307*— wh-c2 0 4 8i;y bsss-raic 

tt N N = 2 0 0T?PI4W2. 9%, N=2 2 5TPIifi 

0. 0 5 % fc* D , 99. 95 %fflflt*Tf BttfflWffil© 
S6©*^T-r*CI4W 1.12 5 

[0 13 8] ft*, g?J££§t*£^* s ±iB©<fco&§gffi 

c&a^-*©:ft;*fct, «^if^±HB©«»> «•*-«!«© 

[0 13 9] (1) ©tHf*>6t>*>4J:'5Cs 56^P 
fct, B«^TC<e*fc>*-;*h©*CJ:-3T*&<£* 

[0140] btibt, mtizmt>&iz8i<Dmfflz& 

SftftHtiU Ell 2©7* — hf5 1 2 try bag 
■TSSteTtts *M*0. 3#, e*0. 6#, Ell 3© 
7*- Vy YT' 2 0 4 8 try b jlgTrSW-grT-fct, «/J% 

1. 12 58>***2. 2 5fj>i:fca. a*© 
F>i?xTT'#UI£fT-5 R S ABt^&ffiV>&g8SEOli 

^ Rff £ * W 5{t!l#±f3© <fc 5 JMSHEfllflWIft ^fiM" 
SCDt«6«3&:«-JMDa©RflBH±, 0. l~2#gJST*fe 

So 

[0 14 1] LfcA^T, BBECttStilWDja&SfcfflSl 

cswsRriffltt* ^n-rako. 4~4. 2 5®m&t. 

{1- (1-77) N} K 
d©«t*£ 9 9%J^fcr«fcfcfc 4 &S&#^--;* h© 
jSWIIRN* (2) &frt>mn-tZ>£, mi 2<D7*- 
v»M?5 12Kf 3 9@J:«C5. b 

(1 

(0. 0 0 5fj>x 3 9) X 3 = 0. 5 8 5# 
W5„ 01 3©7tf-vy bX'2 0 4 8H<> hiiSf 
2 CHU 4 6 [! 5 , 99 %©tt*?R|iEfflttnB©& 

(0. 0 0 5#X4 6) X 2 2 = 5. 0 6 5# 

[0 14 9] *fcBEi!&©»!K RR*Sfr*«*U:IB© 

[0150] (2) ©tHf*»e.t>A»5J:-5t:s Kttffl* 

[0151] ufci^T, Rff£Hfc3&tt©&&£<& 



(I-77) N-1+ 

-lx (I-77) N-K+l (l) 

[0142] #flSE0!lk:»iftfcf , B?tttRBEfflflMR©& 

[0 14 3] tt;Jb\ iC"Ctt»0«a«ff^©»ftaffll/ 

[0 14 4] Ell 4fcijVr*ifi0!*tts BEEti!*^ 

[0145] c ^T-(is g£ji£©^ 2 (DmmmcD^-z h 
mamttmrn l t kwt « . 

[0 14 6] BEi£©iitK gMKrakbTN RSA, x 
;uj(fv;i/©TO#S*«*lk-r*fc^ * UTS* 5*1- 
Ks>bRUu 5 1 2, 1 0 2 4, 2 0 4 8©3iit>#% 

i&ns. cm;ew-©try h»stjifi©7*— h£ 

01 2©7*— vy hT?5 1 2 try hisgt-ac 

&K = 3T*&t), Ell 3 ©7*— ^y ht*2 0 4 8 try 
hj&g-raCfcfc, K=2 2T*fc3o 
[0 14 7] ££T\ b©jIffl[fl]R£N 

y h &mm lt4>& < k t> i \s\m t> m < n tor- » 
astern, i- (1-77) N-e;&5o 

[0 14 8] C©N@©3Smt^i!l»K«»j-|»0Jil/fc 

Kffl©^f!Jbfc^*-XhA s ±T'i»Sc<i:*)llHim 
0 88 < m a £ k ©T- & a «S*ti, 

(2) 

■rsa^-cou ffi'J^o. e«>, «^i. 2#, bus© 

bT- 2 0 4 8 try h3ll§-raa^T*{±, fi^ 
5. lfk jfcfclO. 2S>k«6S. 
[0 15 2] ®W©^— K^T-TjaaSfrSR 
S ABgp^-SrfflV^fc^SE©®^ |?,|iE*S{t S(I!IA J ±IB© 

«t o ttREfl3W*ft£fi!tr a © Cjsa?a snwDa©«Fn 

(±, 0. l~2#fI«T-fe?>o 

[0153] Lfea^-r, BBECfli'iflWRcasakjaa 
tits^put ^w-rako. 7-i2. 2mmt 

ft§o 

[0154] ^©saswciftsks j^ttiiiif!S* s ia«-r-^ 
fea„ ih*4*t fcx mmmmconsMtimmmmm 

[0 15 5] Sfc, Ell Kz^-tmmmtit^LXs it 
«WiMiEffl«^«©^l*/«fiv^»&tjibTV^« i:v^x 

So 

[0156] El 1 5 t^-r^5E^JT-»i, Bg^bff^©a 
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[0 15 7] BECRSA*Srefcfli^$»^ Sf^SPJffl 
H©-5t>, ECB (Electronic Cod 
e Book) t-KJ:CBC (Cipher Bio 
ckChaining) ^E— Kfcffl^S Z ttfi^Z. <b 

s D zco-^xD^-Y^mmLtzm^ esas±-cii; 

So 

[0 1 5 8] a« N WM^b-rsttlCy-^H:, m«A 
SCH3-l«aCffi'5, &&^B2£4bl 0£ft&A§ 

So 

[0159] Ltzifi^x, 7uv*±fcKimt)ftm®.L 

tc®.W4k.(D : r-t>te.s y*--?v blZ-&t)t£^Z£X\ 
©eSS©BRfc» t) ;W8£ bfc d t ftttUJ-e 
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